Cyber Security Governance Is A Leadership Responsibility

Uploaded on 2024-03-19 in TECHNOLOGY--Resilience, FREE TO VIEW

As cyber threats evolve, boards must remain vigilant in cyber security governance says the British National Cyber Security Centre. Understanding threat and managing cyber risk are crucial for effective cyber security governance, and boards play a critical role in ensuring this.

Not only do boards carry the legal responsibility and accountability for cyber governance within their organisation, they also have the opportunity to harness the benefits that technology offers, drive their company's agenda, and deliver real value throughout the organisation.

The NCSC has released a new video in which  Paul Chichester, the NCSC’s Director of Operations and Tasha Grayson, Deputy Director of NCSC Assessment, discuss the general threats that organisations face in the evolving cyber landscape. 

They highlight the importance of board-level involvement in making informed cyber security decisions enabling boards to not only protect their organisation, but to also exploit the opportunities that technology brings.

Cyber Governance Training Pack for Boards

In the coming year, the NCSC is committed to developing a comprehensive and interactive online 'Cyber Governance Training Pack' for Boards. This will provide boards with valuable knowledge and practical guidance to enhance their understanding of cyber security governance.

The training will complement the Department of Science, Technology, and Innovation’s (DSIT) proposed Cyber Governance Code of Practice . The NCSC training Pack will include these elements: 

  • Code of Practice:   Aimed at executive and non-executive directors (and other senior leaders), sets out key actions to take to strengthen their cyber resilience and governance regarding cyber risk.
  • Cyber Security Toolkit for Boards:  The NCSC provides guidance on how to implement the actions the outlined in the Code.

As cyber threats evolve, boards must remain vigilant in cyber security governance. Our video, Board Toolkit, and upcoming training empower boards to understand risks and provide effective governance. We will update you on our progress later in the year. Keep an eye out for further announcements.

The NCSC is calling for  feedback and are open to suggestions on how we can improve our resources for board members. If you have any comments or questions, please get in touch HERE

National Cyber Security Centre     |     National Cyber Security Centre     |     UK Government

Image: Unsplash

You Might Also Read: 

A “Whole-of-Society" Approach To Cyber Crime:

DIRECTORY OF SUPPLIERS - Governance, Risk & Compliance:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible

 

« Malawi's Passport System Breached
Microsoft Going Large On AI & Cloud Computing »

ManageEngine
CyberSecurity Jobsite
Check Point
Cyrin

Real Attacks. Real Tools. Real Scenarios.
Schedule a demo

Sign Up: Cyber Security Intelligence Newsletter

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Gamma

Gamma

Gamma is a leading provider of Unified Communications as a Service (UCaaS) into the UK, Dutch, Spanish and German business markets.

Nethemba

Nethemba

Nethemba provide pentesting and security audits for networks and web applications. Other services include digital forensics, training and consultancy.

edgescan

edgescan

edgescan is a cloud-based continuous vulnerability management and penetration testing solution.

Bird & Bird

Bird & Bird

Bird & Bird is an international law firm with a focus on helping organisations being changed by technology and the digital world. Areas of expertise include cyber security.

Information Technology Industry Development Agency (ITIDA)

Information Technology Industry Development Agency (ITIDA)

ITIDA has two broad goals: building the capacities of Egypt’s local information and communications technology (ICT) industry and attracting foreign direct investments to boost the ICT sector.

Information and Communication Technology Authority (ICT Authority) - Kenya

Information and Communication Technology Authority (ICT Authority) - Kenya

The ICT Authority is responsible for enforcing ICT standards in Government and ensuring information security.

Belkasoft

Belkasoft

Belkasoft is a software vendor providing public agencies, corporate security teams, and private investigators with digital forensic solutions.

Level Effect

Level Effect

Level Effect is developing new capabilities to bring a unique perspective on proactive network defense and advanced security analytics.

Charities Security Forum (CSF)

Charities Security Forum (CSF)

The Charities Security Forum is the premier membership group for information security people working for charities and not-for-profits in the UK.

Safetech Innovations

Safetech Innovations

Safetech Innovations is a team of cyber security experts, always at your service. We use human and cyber intelligence to help your business in uncertain times.

OwnBackup

OwnBackup

OwnBackup proactively prevents you from losing mission-critical data and metadata with automated backups and rapid, stress-free recovery.

MedSec

MedSec

MedSec is the only company of its type focused solely on cybersecurity for hospitals and medical device manufacturers, offering both a cybersecurity software solution and consulting services.

Accenture

Accenture

Accenture is a leading global professional services company providing a range of strategy, consulting, digital, technology & operations services and solutions including cybersecurity.

Suffescom Solutions

Suffescom Solutions

Suffescom Solutions is a leading blockchain development company, assisting businesses in harnessing the true potential of blockchain technology.

Nexer

Nexer

Nexer is a modern tech company with expertise in strategy, technology and communication with a strong vision.

Cyberscore

Cyberscore

CyberScore specialize in digital security assessments that preventively make digital environments safer against malicious attacks from inside and outside.